Agencia Espanola de Proteccion de Datos
ESaepd.es
The Agencia Espanola de Proteccion de Datos is Spain's independent data protection authority. Under GDPR Article 33, a controller must notify the AEPD of a personal data breach without undue delay and, where feasible, within 72 hours of becoming aware of it. Breach Census checks the AEPD's published resoluciones listing daily for breach-related decisions naming an identifiable organisation; most of that listing covers individual rights requests rather than breaches, or anonymises the party involved, so none has yet qualified as a recorded action here.
Enforcement actions
No enforcement actions recorded for this regulator yet.
Questions and answers
Does Breach Census have any enforcement actions from Agencia Espanola de Proteccion de Datos on file?
No enforcement actions from Agencia Espanola de Proteccion de Datos are recorded on Breach Census yet.
What is Agencia Espanola de Proteccion de Datos's breach-notification rule?
Like every EU/EEA national data protection authority, the AEPD requires notice of a personal data breach under GDPR Article 33 (without undue delay and, where feasible, within 72 hours of becoming aware of it) and, when the breach is likely to result in a high risk to the people affected, under Article 34 to those individuals directly.